diff --git a/ops/nixos/lib/secretsmgr.nix b/ops/nixos/lib/secretsmgr.nix
index 5ebed8c8aa..9c515456b7 100644
--- a/ops/nixos/lib/secretsmgr.nix
+++ b/ops/nixos/lib/secretsmgr.nix
@@ -123,6 +123,7 @@ in
     systemd.timers.secretsmgr = {
       requires = ["vault-agent.service"];
       after = ["vault-agent.service" "network-online.target"];
+      wantedBy = ["timers.target"];
 
       timerConfig = {
         OnActiveSec = "30";